We are getting close to releasing BugBountyHunter v2 which will introduce a brand new website, including member platforms, new features, challenges, guides, videos, and the long awaited zseano methodology v2. Right now, all of the content on this website is considered out-dated, however our members section continues to operate for members.
Stay tuned for updates coming soon!
| Report Title | Event ID | Severity | Vulnerability Type |
|---|---|---|---|
| PII leak via /drpanel/drapi/qp.php?name=sanjay | FirstBlood v1 | CRITICAL | Auth issues |
| Invitation code leaked on reddit | FirstBlood v1 | High | Auth issues |
| IDOR on newly registered doctor | FirstBlood v1 | CRITICAL | Application/Business Logic |
| IDOR on /drpanel/drapi/qp.php endpoint | FirstBlood v1 | CRITICAL | Application/Business Logic |
| Can know who are attending an HackerBack event | FirstBlood v1 | CRITICAL | Information leak/disclosure |
| Open Redirect via logout ref parameter | FirstBlood v1 | Low | Open Redirect |
| Stored XSS on cancelled.php endpoint | FirstBlood v1 | High | Stored XSS |
| Reflected XSS on login Page via ref paramater | FirstBlood v1 | Medium | Reflective XSS |
Getting started
Learn about vulnerability types 
Getting started in bug bounties 
Test your knowledge
Free Web Application Challenges
Guides for your hunts 
ZSeano's Methodology
Effective Note Taking for bug bounties
Useful Resources 
Disclosed HackerOne Reports 
Our community
Endorsed Members
Hackevents 
Member Articles 